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REMARKS 

' . cwmsn, n.j^t, and 22 have been """"^ . . : 

^ We been Snbstantianv grated into then reactive independent » 
„d .5. Accordingly, claims 10, U, 13-17, ». 20, and new claim 23 are presented fox 
reconsideration . 

Claims 10 11, 15-17 and 20 have been rented under 35 U.S.C. § 102(b) as being 

Ihk TI. Patent Application Publication No. 2003/0014662 Al to - 
allesedlv anticipated by U.S. Patent Applicant . . . 

PatentNo 7 237,25* «o Pentose e, al. (hereinafter -Tantuso"). Clarms 12, 13, 18 21 and 
Patent NO. l,^', .election of these claims. Applicant 
22- have ..been canceled, thereby obvratrag the rejecnon 

A r eiecbon based on 35 U.S.C. § 102 requires that the cited reference <Ssclose 
sJ^Zz^ -red by dre Cairn. . «~. «** " ^ 

^^Z^.s.P.Q.d ion; ioi 9 (Fed. w: t^««~*- ; 

• r , U S P O 2d 1766, 1767-68 (Fed. Cir. 1987), cert, denied, 484 U.S. 1007 
„ *, 3 U S W . gM 628 . 631> 2 u s p Q 2D 1051, - 

amy, inc., ^ ^ Wandated 

.L053 (Fed. Cir.), cert., denied (»« O ^ 
1 4 k TT«r S 102 requires no less than complete <mu v 
* at 35 U S C - § . , eOTior ^ disclosure of all elements of a claimed invennon 

. - ..eqnires.hepresencemasmglepnorartdrsclos ^ 

arranged na . in the claim." Connetl v. Sears, Roebuck ^ ^ ^ ^ y S P Q 2dar 
. U J.Q.193,.l S 8,,(Ted, Cir. 1983); See also, ». .J**- *— 32 ^ 
- ! m9i K^&saaf «>•«?., 814F.2dal6.il. 
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.Ajneao^xrt.!^^ 

. -Reply to Office A(^CrtLof Aprils ?W? . ........ .......... 

. " The E«mmer.-tas failed to establish .bat Gupta is an anticipatory returnee under , 
35 U SC'V 102 (b) because Gupta does no, teach or sugges.all of the etatoed elements 

defining a finite state tnaehine for each application protocol, modebng finrie aate 
^toea established for each apptication protocol, gating anal^tnodeb^n, 
finite state machine models for each application protocol, filtenng file 
. ■ usteg tite analysis models cashed for each application 

analysis modules, as required in amended claun 10. Similarly, oup 
IJs, filtering tite tmnsported data based on the analysts models estabhsh d ^ 

X 0 colusm g meanaly ? ismodities,asre q mretimamendedmdependen t c,a m l 5 . 

: The present invention rnlates to a method fox securing logtca 1 access m 

,w a with a computer telecommunication network, 
computer equipment exchange dara » -mp 

according to at least one application ^ fcr each . 

one or more application protocol using the analysis modules. 

rt h, 72-76 of the specification, the present invention 
As detailed m paragraphs 72-/0 or in* y 

applicln" attacks. In paragraph 4 of me specification, apphcant defies J 

• . ' 6 ' • ■ • ■ 
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Amendment .dated October 2, 2007 

-•■ -Reply to Office Action-of April 2, 2008 . • - 

^ to *^.«W to the implementation of an KriWtf Protocol by 

a deve.oper, or tire vuhrerabihties .inked . the use of an apphcation, particular* by a 

network administrator. 

: Whereas, Gupta' describes methods for detecting intrusions on acomputer: 

Specifically, Gupta describes that Ibe "protocol parser 64 is implement ' 
. ' Ite-rnachine" Ar bes,. .be protocol parser 6, of <hrp,a ,s eomvalen, to tire analys, 
■ ZZ of tire present invention. However, contrary to tire Bxaminer's erroneous 

• analysis module must be implemented using a finite-state machme. 

• To hnbue one of ordinary skill in the art with knowledge of the present invention, 
when no pnor ar, reference or references of record convey or suggest mat 

a w the teacher" WL. Gore & Assoc. v. Garlock, inc., /zi 
inventor taught is used, against me teacher. wm. vj 

F-2d 1540, 1553 (Fed. Ciri 1983). 
: . . „ Hg. 2 (element 60), «, 5 (bio* 66* aud Pig: 

paragraphs 0086, OOS. and 00,1 in Cup*, ^^^^^ 
. protocol parser (arguably equivalent to the analysis module of the pre 

. to contradict the clear teachmg of the prior art 

Consideration of what mat ar. teaches, not by uang applicant s mvention -a 
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DocketNo.: NY-GRYN 223-US 

Application No. 10/537^10 

■•■Ajncndrtent , daiBd.OctobeK2,2p07 

Reply*) Office-Action-of ApriU, 2008 „ . . ..... ... 

applicant's mvention. The Examiner cannot simply change the principle of tire operation 
of the reference to render, the claims unpatentable. 

Additionally, Fig. 2 (element 67), Fig. 7, Fig. 10, and paragraphs 0107, 0101-1110 
• in4h.pt*, ctted by the Exauuner, merely describes that the protocol parser 64 compares 
tire tokens to its list of tabulated attacks as se, forth in Fig. 7 to detect toustons on tire - 
computer, but contrary to me Examiner's assertion, Gupta does no, teach or suggest 
•.modeling each finite-state machine in me form of a model," as retired in datm 10. 
Gupta merely describes mat tire protocol parser 64 (arguably the analysis module) • » 
implen.ntedmnsmgagenericstetemacmne. It is ■well settled that the Examiner cannot 
contradict me.elearteaching.of the reference to render tire claims unpatentable. 

Further as noted herein, Fig. 2 (element 67), Fig. 7, Fig. 10, and paragraphs 0!07 ; 
0101-110 in Gupta,' cited by the Examiner, merely describes that the protocol parser 64 
compares the tokens to its list of tabmated attacks as se. forth in Fig. 7 ,0 detect rn.rus.ons 
on tire computer, but contrary to me Examiner's assertion. Gupta does not teach or 
suggest "generating from each model, an analysis module for each application protocol 
using an interpreter" as reared in claim 10. Applicant respectfully submits that me 
Examiner cannot use hindsight gleaned from the present invention to reconstruct, or. 
modify the prior art reference to render claims unpatentable. 

I, to unclear to Applicant, how Gnpta can antiopate claim 10 when Gupta Ms .0 
reach or suggest three" of the four claimed steps. Therefore,' since Gupte fails teeoh or 
sugg es, all of the claim limitations of independent claim 10. it follows mat Gupte does 
no. anticipate or render obvious independent claim 10, or any of clauns 11 and 
dependent on independent claim 1 0 . 

.. <»» 14 «> *-» 10 ^ « «* additionally 

^mres "parametenring said analysis modules in accordance wim predetemnned 
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- Ajner^ment -dated October 2, 2007 

Reply-to Office. Acuoaof-Apra.2, 2008. _ 

restrictions by a network administrator." However, contrary to the Examiner's assertion, 
Gutpa does not even suggestive of parametenring the analysis module, in accordance 
: with predetermined restrictions by a network administrator, as required to claims 14 and 
19 Gupta merely describes eomparing me tokens to a Us. of tabulated attacks as set forth 
to Fig 7 The force of logic compels the conctasion that a prior art reference which is 
sitentas to me existence.^ a claimed element, cannot teach such claimed element. 
AppUcants respectfully submit that me Examiner cannot use hindsight gleaned from me 
present invention to render claims 14 and 19 unpatentable. 

More0 ver as admitted by the Examiner, Gupta does not teach or suggest 
se.ective,y reacting me capabilities of one or more application protocol using the 
a^vsis modules, as required in amended independent claims 10 and 15. Tins clamred 
Cement was prigtoally fecited to now canceled Cam, 12, 13, 18, 21, and 22. T* 

this deficiency, the Examiner tutus to Panmso. 

Of course, to establish a prima facie ease of obviousness, toree basic criteria must 
fco m e«. First mere must be some suggestion or motivation, totoer in toe references 
Selves or in the knowledge generally available to one of ordtoaty skdl « the art, to 
modi fy the -reference or to combine reference teaching, Second, *ere mns, b 

u, , «™ of success Finally, the prior art reference (or references when 

reasonab e expectation of success, rmauy, v 
. combined) must teach or suggest all the claim limitations. The teactong or snggestion to 
Z, the Calmed combination and the reasonable expectation of success mu* be f un 
I L pnor art, and no, based on Appellant disclosure. In re Vaeck, 947 » 
. . Q .2d-14 S (Fed. Cm 1991)-, 2,43. Here, toe Examtoer >^ fiuled » 

a ease of obvtousness Gup, or ramus.. — « 

- combination therewith does not teach or suggest d the claim lumtations of clamrs 10, 1 1, 
14-17, 19, 20, and 23. 
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Docket No.: NY-GRYN 223-US 

..Aw^^°^^l^9 . - - . - - 

/\ lTl P^ment dated October 2, 2D07 . " . : . .". 

KeplytD Office Action-of April 2,.^X)8 . 

Pantuso relates to graphical user interfaces associated with firewalls and - 
summarizmg firewall activity. Contrary to the Examiner's assertion, Panruso does no. 
teach or suggest "selectively restricting the capabilities of one or ntore application 
protocoling said analysis modules," as required in amended independent claims 10 and 
15 In fact col 5 lines 44-54 in Pantuso, cited by the Examiner, merely describes 
configuring die firewall filtering in a user-defined manner and mat the firewall is used to 
block attempts to access network made by predetermined applications, such as network 
browse, applications, e-mail applications, and file ttansfer protocol (FTP) applications. 
However claims of the present invention does no, require blocking me entre appbeation 
from acting the network as called for by Fantuso. The claims of the present invention 

attacks. Tha, is, me present invention restticts the capabilities of an application, but does 
not authonze/not authorize an entire application, as suggested by the Exaiittner. 

The prior must to be judged based ona full and fair consideration of what that an 
.cache,, not by using Applicants- invention as abhieprint foz ^various 
edifying the pieces in an attempt to reconsttuc. Applicant- invention. The Examiner 
cannot simply change the principle of me operation of the reference or render die 
Terence inoperabie for its intended purpose to render the Cairns unpatentabK 
Accordingly, it is submitted tha, me Examiner has succumbed to die hue of prohibited 
hindsight reconstruction. 

Statements appearing above m respec, ,o me enclosures in me cited references 
represent the present opinions of me applicants' undersigned attorney and, m toeveu 
« the Examiner disagrees with any of such opinions, it is respectfully requested the me 
, Examiner specifically indicate those portions of me reference providing the basts for a 
contrary view. 
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- Aaroeotoert^ 

• Reply to Office Action of April.2, 2008 


In view of the above, applicant believes the pending application is in condition for 

RECEIVED 

allowance. CENTRAL FAX CENTER 

APR 0 2 2008 

Please charge $525.00 to the credit card. Form PTO-2 03 8 is attached. The 
Concessioner is. hereby, authorized to charge any additional fee or crecht any 
overpayment to Deposit Account No. 50-0624, under Order No. NY-GRYN 223-US 
(10505903) from which the undersigned is authorized to draw. 
.Dated:! April 2, 2008 " , Respectfulrptoitted, 




C. Andrew Im 

Registration No.: 40,657 

FULBRIGHT & JAWORSKI L.L.P. 

666 Fifth Avenue 

New York, New York 10103 

(212) 318-3000 

(212) 318-3400 (Fax) 

Attorney for Applicant 
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